CVE-2024-45422
Estado: AnalizadaAlta (7.5)—
Improper input validation in some Zoom Apps before version 6.2.0 may allow an unauthenticated user to conduct a denial of service via network access.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.55%
- Percentil entre todas las CVEs puntuadas: 44
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
🎯 Técnicas ATT&CK
Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.
- Explotación
T1190Exploit Public-Facing Applicationinitial access85 % - Impacto principal
T1499.004Application or System Exploitationimpact90 %
Vector CVSS N/A/L/N/N indica acceso remoto sin autenticación ni interacción. CWE-20 (improper input validation) combined with DoS effect suggests network exploitation leading to service unavailability via resource consumption.
Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.
🛡️ Mitigaciones ATT&CK que cubren estas técnicas
Tecnologías afectadas (6)
CWE
- CWE-20
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2024-45422",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2024-45422",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-11-20T15:34:52.055891Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "security@zoom.us",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.5,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
"integrityImpact": "LOW",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "LOW",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 2.5,
"exploitabilityScore": 3.9
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "security@zoom.us",
"affectedData": [
{
"vendor": "Zoom Communications Inc.",
"product": "Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers",
"versions": [
{
"status": "affected",
"version": "see references"
}
],
"platforms": [
"Windows",
"MacOS",
"Linux",
"iOS",
"Android"
],
"defaultStatus": "unaffected"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"affectedData": [
{
"cpes": [
"cpe:2.3:a:zoom:workplace_app:*:*:*:*:*:*:*:*"
],
"vendor": "zoom",
"product": "workplace_app",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "6.2.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:zoom:meeting_sdk:-:*:*:*:*:*:*:*"
],
"vendor": "zoom",
"product": "meeting_sdk",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "6.2.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
]
}
],
"published": "2024-11-19T20:15:31.430",
"references": [
{
"url": "https://www.zoom.com/en/trust/security-bulletin/zsb-24044",
"tags": [
"Vendor Advisory"
],
"source": "security@zoom.us"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "security@zoom.us",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper input validation in some Zoom Apps before version 6.2.0 may allow an unauthenticated user to conduct a denial of service via network access."
},
{
"lang": "es",
"value": "La validación de entrada incorrecta en algunas aplicaciones de Zoom anteriores a la versión 6.2.0 puede permitir que un usuario no autenticado realice una denegación de servicio a través del acceso a la red."
}
],
"lastModified": "2026-06-17T07:54:11.317",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:android:*:*",
"vulnerable": true,
"matchCriteriaId": "FDAC7DED-7124-49DC-81FE-3A846C6FAC6B",
"versionEndExcluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:iphone_os:*:*",
"vulnerable": true,
"matchCriteriaId": "8E8DDD36-808D-4864-AA07-0760E4375FCA",
"versionEndExcluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "49957FA5-35FF-40AC-B88E-A235FA00F639",
"versionEndExcluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:macos:*:*",
"vulnerable": true,
"matchCriteriaId": "B02E0B95-F342-4D19-9C56-0ED458942E09",
"versionEndExcluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:windows:*:*",
"vulnerable": true,
"matchCriteriaId": "6398CA4B-4E28-4004-A5AA-0FBFAC5D2D13",
"versionEndExcluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:ipados:*:*",
"vulnerable": true,
"matchCriteriaId": "A3484384-C52C-41FF-91FC-5D0A2227CD83",
"versionEndExcluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:*",
"vulnerable": true,
"matchCriteriaId": "05EFB308-185E-41CD-9E1F-A6EAB1BE3314",
"versionEndExcluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*",
"vulnerable": true,
"matchCriteriaId": "7AC5BD11-4FF8-4BEA-9151-75E165750703",
"versionEndExcluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:android:*:*",
"vulnerable": true,
"matchCriteriaId": "8DF64BAE-8FB5-4FB1-AA60-F34DA38B7882",
"versionEndExcluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "7C050E43-5F66-4F82-8725-6D4F86C2D7FC",
"versionEndExcluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:macos:*:*",
"vulnerable": true,
"matchCriteriaId": "78CF87EF-1F6A-4059-AA3F-C9EFAB6311E4",
"versionEndExcluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:windows:*:*",
"vulnerable": true,
"matchCriteriaId": "0E9FA665-AB32-4140-91F9-57E2EA14D837",
"versionEndExcluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:zoom:video_software_development_kit:*:*:*:*:*:android:*:*",
"vulnerable": true,
"matchCriteriaId": "F7D73FAD-D117-46F1-A30F-B373103576BB",
"versionEndExcluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:zoom:video_software_development_kit:*:*:*:*:*:iphone_os:*:*",
"vulnerable": true,
"matchCriteriaId": "1615D4AC-42A1-4A37-80E8-DD312EF7D9D3",
"versionEndExcluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:zoom:video_software_development_kit:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "C11934B8-2EFA-4274-ADAD-53447B0BC972",
"versionEndExcluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:zoom:video_software_development_kit:*:*:*:*:*:macos:*:*",
"vulnerable": true,
"matchCriteriaId": "70AEFFD5-918F-4046-9856-C665C2DEF4C4",
"versionEndExcluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:zoom:video_software_development_kit:*:*:*:*:*:windows:*:*",
"vulnerable": true,
"matchCriteriaId": "F18288EB-7820-4C47-A589-BF3DA06A75C0",
"versionEndExcluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:zoom:workplace:*:*:*:*:*:android:*:*",
"vulnerable": true,
"matchCriteriaId": "39EF83F4-626A-43F1-9312-147F65B1EC5E",
"versionEndExcluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:zoom:workplace:*:*:*:*:*:iphone_os:*:*",
"vulnerable": true,
"matchCriteriaId": "21D7D4E9-14DF-48CF-A9F9-A61408B59789",
"versionEndExcluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "655AC669-B03B-4BDD-B578-F6F02FAD857E",
"versionEndExcluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:macos:*:*",
"vulnerable": true,
"matchCriteriaId": "8A311271-1418-4E8C-90B5-960E37592BAE",
"versionEndExcluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:*",
"vulnerable": true,
"matchCriteriaId": "F401A8C2-F0DF-4EC9-B0C2-11D9EB1BED15",
"versionEndExcluding": "6.2.0"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "security@zoom.us"
}